Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: C0zWG50jUhxD5QiOrA02BX0JRy434RaO1iMtGjwMWUc=
Subject key identifier: DB:56:DF:10:E4:04:F5:40:09:9C:23:74:8C:D2:59:23:1B:1F:BF:81
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019FA9071DC79CEF72352285A07FA2B24F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 13CD
Signing time: Tue 28 Jul 2026 14:00:43 +0000
Manifest this update: Tue 28 Jul 2026 14:00:43 +0000
Manifest next update: Wed 29 Jul 2026 14:00:43 +0000
Files and hashes: 1: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: FwSYq2XPGaUygByz8Ov2sZ/dwLa0EXSxP7hFq5/aceM=)
2: oHaqxqTMWybml5c6wSCcPWrN2MI.roa (hash: ASmpLH273yXVFzp2LFZCIwFoN6v91nXnKPxcq712jXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:1d:c7:9c:ef:72:35:22:85:a0:7f:a2:b2:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Jul 28 14:00:43 2026 GMT
Not After : Jul 29 14:00:43 2026 GMT
Subject: CN=db56df10e404f540099c23748cd259231b1fbf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:2e:ee:15:57:93:11:30:47:90:25:6e:db:
e7:5d:aa:3a:1f:25:54:2e:b4:dd:be:bd:c8:03:1b:
a6:ba:11:22:00:2b:76:90:d7:32:c2:70:37:bd:5b:
07:f0:8a:cb:51:a5:f9:be:4b:a7:f1:42:b0:a4:12:
d9:b4:37:2e:2b:2f:61:7e:29:dc:a2:a9:cf:82:94:
fa:68:cc:57:c7:02:0a:8f:d0:51:5f:e4:41:54:f0:
31:11:f2:12:fc:bf:0b:b5:43:ba:b8:22:92:1b:9b:
75:e6:5a:14:c5:55:5d:9a:87:c1:b3:5b:36:d1:cf:
3e:e9:3a:32:29:49:49:79:2f:ed:9b:5c:31:9f:e2:
6c:aa:de:90:6f:22:66:ad:59:4c:fc:97:ca:b0:e3:
a9:76:b1:88:ef:81:01:68:e8:0b:d5:98:4f:30:4c:
85:75:59:dd:12:2c:65:dd:1a:96:6e:76:67:c0:c6:
01:fc:df:35:d9:98:67:d8:2c:1e:e3:58:a5:06:56:
79:67:ca:81:e4:dc:78:88:b4:9b:5f:77:d2:d5:b8:
51:ad:cd:e3:1a:de:d5:17:e0:95:09:96:3f:96:cc:
77:cc:2f:29:d7:86:69:37:fa:76:29:60:a7:2b:b2:
a8:0d:7d:f1:10:f5:62:15:0f:65:d0:60:e9:46:07:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:56:DF:10:E4:04:F5:40:09:9C:23:74:8C:D2:59:23:1B:1F:BF:81
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:49:23:32:c8:63:6a:a8:14:1a:f9:c0:99:2a:3c:41:ab:d2:
43:01:d7:1c:13:0b:ca:8a:a5:53:44:e2:5d:46:34:80:e3:2d:
f4:b7:ed:90:77:e4:7a:1b:fe:2f:b2:b4:09:dc:a8:93:97:f6:
04:e0:c0:6d:6d:f2:e3:f3:01:9b:06:73:37:6b:b3:53:5d:60:
fe:a1:71:82:c8:68:93:d6:8b:38:cd:c9:56:fa:e2:d5:3f:13:
57:94:43:77:f1:92:75:3d:a4:61:bd:81:be:2b:af:e4:3f:02:
0c:3e:15:be:60:65:a6:d6:fb:d5:21:03:50:c9:66:c1:70:bf:
3f:c4:3b:2b:ad:da:0b:07:e5:ad:ae:77:bd:a3:0a:58:fa:88:
6d:df:57:af:e4:5e:de:e0:44:6b:af:bb:3f:92:46:d4:1c:c9:
09:83:89:26:bf:b9:3b:9d:b7:49:40:92:b3:52:1c:ee:f3:d1:
90:d9:6e:19:fd:cf:1f:4d:c5:05:e1:e2:a3:8e:59:ef:88:c8:
f3:19:e0:03:25:c4:49:3c:ca:13:26:84:a7:36:97:91:41:dc:
39:bd:78:96:86:d4:07:b6:f3:eb:bc:a0:70:32:0b:9f:04:93:
77:9a:f6:ec:86:be:f6:11:1f:6e:13:a0:47:80:10:be:a4:75:
e0:1d:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:15 2026 by rpki-client